Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/5SrdlpRMYyTaYrV6DBUmd3IIAaE.roa
File: 5SrdlpRMYyTaYrV6DBUmd3IIAaE.roa (raw, json)
Hash identifier: z0tDaMPqe7mcGLlKnmD4+ddvRNGMqcQaV9QSJ9wgNgE=
Subject key identifier: E5:2A:DD:96:94:4C:63:24:DA:62:B5:7A:0C:15:26:77:72:08:01:A1
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 019D399A298F49F196AD890D523ACA0EC546
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/5SrdlpRMYyTaYrV6DBUmd3IIAaE.roa
Signing time: Sun 29 Mar 2026 12:38:17 +0000
ROA not before: Sun 29 Mar 2026 12:38:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200924
IP address blocks: 217.147.56.0/23 maxlen: 23
217.147.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:9a:29:8f:49:f1:96:ad:89:0d:52:3a:ca:0e:c5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: Mar 29 12:38:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e52add96944c6324da62b57a0c152677720801a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:ab:4e:ed:2b:aa:7a:01:5d:77:72:7d:40:
a6:d4:6e:80:70:66:dc:76:71:cb:bc:73:18:b2:60:
9c:f9:71:7b:49:6e:00:5d:11:83:40:60:b8:b2:bd:
53:05:e0:5c:f7:d0:ec:0e:ad:cc:2b:ae:bf:5d:1e:
32:e5:75:e1:e1:58:34:35:4e:b8:55:cd:f5:2a:9a:
8d:43:4b:fe:78:f2:50:d4:fb:d4:31:eb:9e:8d:cd:
3f:c1:ad:11:de:c0:a7:e0:a4:e4:30:92:7c:cc:2c:
25:2e:4d:f2:83:8c:64:16:1b:5a:31:aa:b5:cc:f6:
78:5b:ca:5d:7f:e0:5c:4b:b6:e1:7c:cf:68:63:56:
5b:d0:95:68:33:86:d7:f1:c0:a0:ae:11:98:8e:84:
82:6f:94:1a:2d:1c:9f:bd:e9:cb:12:e3:a7:1f:47:
ea:f7:84:1c:f3:50:ba:81:32:cf:74:b6:47:e2:2a:
50:88:ca:5e:e2:7c:60:6f:e6:49:a4:d7:f1:75:e1:
6e:06:f4:ef:23:af:d1:af:7a:5a:6f:4c:75:d6:4e:
65:35:93:46:9e:38:d3:1d:a1:12:ba:5a:ab:db:21:
b0:a9:a5:91:5b:7f:33:d0:94:18:93:e3:22:fd:6d:
b3:02:ca:07:be:1b:50:a4:22:97:b8:f7:5e:96:81:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2A:DD:96:94:4C:63:24:DA:62:B5:7A:0C:15:26:77:72:08:01:A1
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/5SrdlpRMYyTaYrV6DBUmd3IIAaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.56.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:87:ed:92:85:c4:e1:be:02:16:a2:39:99:b8:7d:f2:70:e2:
72:b1:0d:c1:07:28:85:69:91:2f:c6:63:71:c0:8b:78:59:fa:
7a:54:16:f8:67:b3:92:1b:f4:e6:be:c1:b4:4b:ce:de:06:d3:
5f:c9:b9:1e:6d:f4:74:d4:33:f1:e7:bf:ba:5c:f0:eb:0d:fc:
d8:27:92:8c:d6:54:1c:37:6a:db:c0:15:a6:b2:03:7d:ff:63:
7b:68:fb:4b:0e:1e:2f:ef:b3:65:13:37:59:54:71:41:08:ac:
c7:84:22:5c:96:0e:2d:9d:f6:3d:ff:9d:04:52:eb:67:78:29:
9a:67:b8:d9:14:30:d8:d1:ed:66:67:c2:d5:7d:02:f2:4c:0d:
e8:ea:17:86:e8:a3:be:f0:68:7f:7c:ee:71:ab:07:4a:c6:e6:
99:36:f0:71:7b:69:19:10:71:d0:f0:29:a5:d2:c0:ae:56:b3:
c9:62:33:af:58:30:ef:4b:9d:b8:d2:87:64:f7:33:a4:ca:fb:
47:b1:2f:bb:75:2a:24:08:3c:7d:cb:53:79:29:d7:3f:dd:62:
23:41:20:cc:8c:b0:48:7f:7e:3b:39:e7:ee:06:9c:92:92:32:
39:7e:25:57:87:48:49:1a:a5:c2:a7:90:bd:14:92:9e:bf:21:
48:a0:38:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ05mimPSfGWrYkNUjrKDsVGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2E3NjNmM2RiMjk2NWExZTRlYjBiZjc2YzFjYjg2OGJh
YWU0NmQwHhcNMjYwMzI5MTIzODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTJhZGQ5Njk0NGM2MzI0ZGE2MmI1N2EwYzE1MjY3NzcyMDgwMWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxqrTu0rqnoBXXdyfUCm1G6AcGbc
dnHLvHMYsmCc+XF7SW4AXRGDQGC4sr1TBeBc99DsDq3MK66/XR4y5XXh4Vg0NU64
Vc31KpqNQ0v+ePJQ1PvUMeuejc0/wa0R3sCn4KTkMJJ8zCwlLk3yg4xkFhtaMaq1
zPZ4W8pdf+BcS7bhfM9oY1Zb0JVoM4bX8cCgrhGYjoSCb5QaLRyfvenLEuOnH0fq
94Qc81C6gTLPdLZH4ipQiMpe4nxgb+ZJpNfxdeFuBvTvI6/Rr3pab0x11k5lNZNG
njjTHaESulqr2yGwqaWRW38z0JQYk+Mi/W2zAsoHvhtQpCKXuPdeloHqGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOUq3ZaUTGMk2mK1egwVJndyCAGhMB8GA1UdIwQY
MBaAFMzKdj89spZaHk6wv3bBy4aLquRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2Zjct
ZmFjNjNjMDNjMjVhLzEvNVNyZGxwUk1ZeVRhWXJWNkRCVW1kM0lJQWFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2ZjctZmFjNjNjMDNjMjVh
LzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ZM4MA0G
CSqGSIb3DQEBCwUAA4IBAQA7h+2ShcThvgIWojmZuH3ycOJysQ3BByiFaZEvxmNx
wIt4Wfp6VBb4Z7OSG/TmvsG0S87eBtNfybkebfR01DPx57+6XPDrDfzYJ5KM1lQc
N2rbwBWmsgN9/2N7aPtLDh4v77NlEzdZVHFBCKzHhCJclg4tnfY9/50EUutneCma
Z7jZFDDY0e1mZ8LVfQLyTA3o6heG6KO+8Gh/fO5xqwdKxuaZNvBxe2kZEHHQ8Cml
0sCuVrPJYjOvWDDvS5240odk9zOkyvtHsS+7dSokCDx9y1N5Kdc/3WIjQSDMjLBI
f347OefuBpySkjI5fiVXh0hJGqXCp5C9FJKevyFIoDhU
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:30:39 2026 by rpki-client